This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft File: 5XFody33TCeZnVM4leGr7c6XJjw.mft (raw, json) Hash identifier: 2GCOyq/AXlr/hro2jEOaYJS3pPhJC0O5jaH+VJXEmXs= Subject key identifier: AF:61:5D:1E:AD:47:1C:81:BD:E0:F8:F9:45:FE:6A:5B:AF:41:1B:7E Authority key identifier: E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C Certificate issuer: /CN=e57168772df74c27999d533895e1abedce97263c Certificate serial: 019B2F30A3D7225CD86107AEE688A492516D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft Manifest number: 02D9 Signing time: Thu 18 Dec 2025 02:01:15 +0000 Manifest this update: Thu 18 Dec 2025 02:01:15 +0000 Manifest next update: Fri 19 Dec 2025 02:01:15 +0000 Files and hashes: 1: 5XFody33TCeZnVM4leGr7c6XJjw.crl (hash: vMcHaPXx1ynLg5Aw1jV+jqmS0QZZToxfu6eDlXdbVok=) 2: O3bnjDPRR3LrGEnM4sKqgBKSZIg.roa (hash: rlXDUrdTVRzlXfFa/VppQ/JwyMwu/FNANchTVmv+fxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:a3:d7:22:5c:d8:61:07:ae:e6:88:a4:92:51:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e57168772df74c27999d533895e1abedce97263c Validity Not Before: Dec 18 02:01:15 2025 GMT Not After : Dec 19 02:01:15 2025 GMT Subject: CN=af615d1ead471c81bde0f8f945fe6a5baf411b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:97:67:04:32:8e:2c:12:c0:7d:b0:7f:67: c5:a4:c3:4d:d9:c9:a3:4c:6c:f9:01:8f:fb:b1:90: b6:b9:69:9b:79:8d:8c:66:2f:4f:8a:7f:6c:b8:8b: fb:59:94:04:7c:13:0d:07:47:d6:f4:d8:65:6c:e7: 20:c0:2d:ab:6e:95:21:6f:05:d0:9a:4b:87:f3:05: 0d:3f:3a:05:8d:c7:3f:c0:20:ed:80:ec:59:d7:e1: 21:d3:24:d2:89:f1:a1:bc:c6:fd:08:58:68:61:b8: 3e:77:7a:bc:26:61:3e:94:1e:7d:8b:c0:50:14:22: ef:c0:3d:31:28:36:59:07:95:9d:1d:0c:3b:f3:05: 56:c8:39:46:a5:3f:16:6f:4d:0a:a0:bf:82:80:ce: db:b1:07:82:a8:7e:76:f9:30:ae:8e:23:4e:f7:21: 67:e4:6d:c2:56:8e:0e:9e:39:61:d7:54:68:52:de: 1d:8f:8d:41:a0:56:ea:4c:32:5d:b8:f5:0c:4a:7c: fa:a1:b0:c2:ee:3a:70:a0:f6:db:87:13:9d:5d:2b: 21:8d:a2:ab:71:ee:d3:d5:33:b5:dc:b4:2a:d3:c4: bc:b0:a8:70:ae:2a:40:30:22:d9:87:17:a4:1e:e6: 8d:80:cf:c2:79:00:b8:3a:18:f2:8c:59:02:0c:1e: 1e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:5D:1E:AD:47:1C:81:BD:E0:F8:F9:45:FE:6A:5B:AF:41:1B:7E X509v3 Authority Key Identifier: keyid:E5:71:68:77:2D:F7:4C:27:99:9D:53:38:95:E1:AB:ED:CE:97:26:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5XFody33TCeZnVM4leGr7c6XJjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/67c087-8b73-4bc8-bfeb-b3dff3a91102/1/5XFody33TCeZnVM4leGr7c6XJjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:a6:56:f7:fb:30:88:73:b9:57:5c:69:3c:ef:db:83:d0: 22:58:13:67:0d:00:df:c0:2c:f8:4b:fc:eb:10:a8:bc:29:54: f1:f1:7a:1f:a4:f3:ce:61:7d:51:c6:65:94:9d:96:e7:23:d4: 05:41:38:21:e5:b9:b0:5b:d2:fd:85:94:85:1b:2b:7a:88:77: 39:c1:e8:3f:44:16:63:71:12:8e:09:93:01:8c:64:87:9d:0a: d3:62:b3:fc:f6:e4:e7:90:9c:52:ab:df:d3:e5:01:81:a8:e3: 6b:6a:66:5d:f9:69:d7:65:84:da:4d:b6:62:bd:54:ba:70:59: 47:17:84:66:f4:b9:fa:0f:38:6c:ba:1e:5a:ac:31:fa:c2:88: ff:5e:c2:e3:1c:3c:ba:a5:2c:3f:dd:44:2f:d0:5e:8a:09:cd: f0:0a:9e:c1:49:30:92:d3:fa:9e:37:06:04:1a:b4:0f:f8:a7: cc:f2:77:f2:ea:43:48:82:7b:30:a5:c9:3f:95:2f:9b:3c:62: 3a:5c:19:e8:7c:11:43:8f:56:1c:06:42:81:72:96:22:aa:db: 54:5d:10:3e:d2:d7:a3:3a:60:02:4c:eb:85:2c:03:e4:28:64: 7c:c2:3e:84:62:8d:9f:aa:10:a5:86:10:e3:13:5c:8b:45:78: 73:a6:41:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMKPXIlzYYQeu5oikklFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1NzE2ODc3MmRmNzRjMjc5OTlkNTMzODk1ZTFhYmVkY2U5 NzI2M2MwHhcNMjUxMjE4MDIwMTE1WhcNMjUxMjE5MDIwMTE1WjAzMTEwLwYDVQQD EyhhZjYxNWQxZWFkNDcxYzgxYmRlMGY4Zjk0NWZlNmE1YmFmNDExYjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9WXZwQyjiwSwH2wf2fFpMNN2cmj TGz5AY/7sZC2uWmbeY2MZi9Pin9suIv7WZQEfBMNB0fW9NhlbOcgwC2rbpUhbwXQ mkuH8wUNPzoFjcc/wCDtgOxZ1+Eh0yTSifGhvMb9CFhoYbg+d3q8JmE+lB59i8BQ FCLvwD0xKDZZB5WdHQw78wVWyDlGpT8Wb00KoL+CgM7bsQeCqH52+TCujiNO9yFn 5G3CVo4Onjlh11RoUt4dj41BoFbqTDJduPUMSnz6obDC7jpwoPbbhxOdXSshjaKr ce7T1TO13LQq08S8sKhwripAMCLZhxekHuaNgM/CeQC4OhjyjFkCDB4eTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9hXR6tRxyBveD4+UX+aluvQRt+MB8GA1UdIwQY MBaAFOVxaHct90wnmZ1TOJXhq+3OlyY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82N2MwODctOGI3My00YmM4LWJmZWIt YjNkZmYzYTkxMTAyLzEvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi82N2MwODctOGI3My00YmM4LWJmZWItYjNkZmYzYTkxMTAy LzEvNVhGb2R5MzNUQ2VablZNNGxlR3I3YzZYSmp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy6mVvf7 MIhzuVdcaTzv24PQIlgTZw0A38As+Ev86xCovClU8fF6H6TzzmF9UcZllJ2W5yPU BUE4IeW5sFvS/YWUhRsreoh3OcHoP0QWY3ESjgmTAYxkh50K02Kz/Pbk55CcUqvf 0+UBgajja2pmXflp12WE2k22Yr1UunBZRxeEZvS5+g84bLoeWqwx+sKI/17C4xw8 uqUsP91EL9BeignN8AqewUkwktP6njcGBBq0D/inzPJ38upDSIJ7MKXJP5Uvmzxi OlwZ6HwRQ49WHAZCgXKWIqrbVF0QPtLXozpgAkzrhSwD5ChkfMI+hGKNn6oQpYYQ 4xNci0V4c6ZBfw== -----END CERTIFICATE-----Generated at Thu Dec 18 10:27:41 2025 by rpki-client